CVE-2002-1637

Oracle 9i Application Server (9iAS) is affected by CVE-2002-1637 due to default credentials configured across multiple components. Over 160 usernames/passwords are present (e.g., SYS, SYSTEM, AQJAVA, OWA, IMAGEUSER, USER1, USER2, PLSQL, DEMO, FINANCE), which can allow privilege escalation for att...

CVE-2002-1641

Oracle Web Cache in Oracle 9i Application Server (9iAS) has multiple buffer overflows that allow remote attackers to execute arbitrary code via unknown vectors. The connected records confirm the affected product and the root cause (buffer overflows) with remote code execution as impact, but do no...

CVE-2002-1654

The CVE affects iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1. A flaw allows remote attackers to initiate HTTP Basic Authentication through the wp-force-auth Web Publisher command, creating a distinct attack vector and potentially making brute-force password gue...

CVE-2002-1647

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2002-1656

CVE-2002-1656 affects X-News (x_news) 1.1 and earlier, a PHP-based news management system that stores user IDs and MD5 password hashes in a world-readable file (db/users.txt). The vulnerability enables an attacker to authenticate as other users by obtaining a password hash (e.g., via sniffing or ...

CVE-2002-1626

CVE-2002-1626 describes a directory traversal vulnerability in Mike Spice My Calendar before 1.5. An attacker can craft a URL containing .. sequences to write arbitrary files on the server. The issue arises from improper validation of path traversal in the web-facing handler, enabling verifying a...

CVE-2002-1630

The CVE-2002-1630 entry affects Oracle 9i Application Server (9iAS). The vulnerability is in the sendmail.jsp sample page, described as allowing remote attackers to send arbitrary emails. Public details in the provided documents confirm the affected component is the sendmail.jsp page, but there i...

CVE-2002-1624

CVE-2002-1624 refers to a buffer overflow in the Lotus Domino web server prior to R5.0.10 when logging to DOMLOG.NSF. The vulnerability can be triggered by a long HTTP Authenticate header containing certain non-ASCII characters, allowing a remote attacker to cause a denial of service and potentia...

CVE-2002-1621

CVE-2002-1621 describes a buffer overflow in the file_comp function of rcp on IBM AIX 4.3.x and 5.1, allowing remote code execution. The vulnerability is tied to the rcp component and affects remote attack vectors with no authentication required, as indicated by the CVE description. No explicit r...

CVE-2002-1628

The CVE-2002-1628 entry describes a directory traversal in Mike Spice Mike’s Vote CGI (vote.cgi) prior to version 1.3, where an attacker can write arbitrary files via .. sequences in the type parameter. Affected component: vote.cgi; root cause: improper sanitization of the type parameter enabling...

CVE-2002-1632

CVE-2002-1632 is documented in multiple security feeds as an information disclosure flaw in Oracle 9i Application Server (9iAS). The affected component is the 9iAS sample pages, which can leak environment variables and other sensitive information through the pages named info.jsp, printenv, echo, ...

CVE-2002-1622

CVE-2002-1622 describes a buffer overflow in certain RPC routines in IBM AIX 4.3, caused by a vulnerability in a variable data type. The impact stated is the potential execution of arbitrary code by a remote attacker with network access and no authentication required (per the CVE description). Th...

CVE-2002-1625

Macromedia Flash Player 6 is affected by CVE-2002-1625. The issue arises because connections are not terminated when the user leaves the page, allowing remote attackers to cause a denial of service via the (1) loadMovie and (2) loadSound commands, which continue executing until the browser is clo...

CVE-2002-1620

Technical details about CVE-2002-1620 are not publicly provided in the supplied documents; no affected product/version specifics, root cause, or remediation are disclosed. Monitor for updates.

CVE-2002-1633

CVE-2002-1633 : In QNX 4.25, multiple buffer overflows in various utilities (e.g., sample, ex, du, find, lex, mkdir, rm, serserv, tcpserv, termdef, time, unzip, use, wcc, wlink, wpp, write, etc.) may allow a local user to execute arbitrary code via long command line arguments. The description spe...

CVE-2002-1619

The CVE-2002-1619 entry describes a buffer overflow in the FC client for IBM AIX 4.3.x that allows remote attackers to cause a denial of service (crash and core dump). Affected component: IBM AIX 4.3.x FC client. Root cause: buffer overflow in the FC client. Impact: denial of service via remote e...

CVE-2002-1627

Technical details about CVE-2002-1627 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2002-1631

CVE-2002-1631 corresponds to a SQL injection vulnerability in the query.xsql sample page of Oracle 9i Application Server (9iAS). The affected component is the query.xsql page within the Oracle XSQL/9iAS environment, and the underlying root cause is unsafely handling the sql parameter in the page,...

CVE-2002-1616

CVE-2002-1616 describes multiple buffer overflows in HP Tru64 UNIX affecting versions 5.1a, 5.1, 5.0a, 4.0g, and 4.0f. The vulnerability allows local users to escalate privileges to root via several utilities: (1) su, (2) chsh, (3) passwd, (4) chfn, (5) dxchpwd, and (6) libc. The description iden...

CVE-2002-1607

The CVE-2002-1607 entry describes a local-privilege escalation vulnerability in HP Tru64 UNIX: a buffer overflow in the ypmatch component affects Tru64 UNIX versions 5.1a, 5.1, 5.0a, 4.0g, and 4.0f, which could allow a local user to execute arbitrary code. The available sources confirm the affect...